summaryrefslogtreecommitdiffstats
path: root/src/evaluate.c
Commit message (Expand)AuthorAgeFilesLines
* payload: add payload statementPatrick McHardy2015-11-251-2/+23
* evaluate: fix string matching on big endianPablo Neira Ayuso2015-11-111-3/+14
* src: allow filtering on L2 header in inet familyFlorian Westphal2015-11-061-1/+46
* src: add interface wildcard matchingPablo Neira Ayuso2015-11-021-14/+77
* src: Add command "replace" for rulesCarlos Falgueras García2015-11-021-0/+1
* evaluate: fix mapping evaluationPablo Neira Ayuso2015-10-231-12/+13
* evaluate: check if table and chain exists when adding rulesPablo Neira Ayuso2015-10-181-0/+11
* evaluate: check if set exists before listing itPablo Neira Ayuso2015-10-121-1/+11
* src: add `list chains' commandPablo Neira Ayuso2015-10-121-0/+1
* src: add dup statement supportPablo Neira Ayuso2015-09-301-2/+31
* nft: support listing expressions that use non-byte header fieldsFlorian Westphal2015-09-181-0/+6
* nft: allow stacking vlan header on top of ethernetFlorian Westphal2015-09-181-1/+77
* evaluate: use existing table object from evaluation contextPablo Neira Ayuso2015-09-111-4/+18
* evaluate: display error on unexisting chain when listingPablo Neira Ayuso2015-08-181-1/+11
* src: add chain declarations to cachePablo Neira Ayuso2015-08-181-2/+18
* evaluate: add cmd_evaluate_rename()Pablo Neira Ayuso2015-08-181-0/+22
* src: add set declaration to cachePablo Neira Ayuso2015-08-181-0/+9
* src: use cache infrastructure for set objectsPablo Neira Ayuso2015-08-181-35/+18
* src: add table declaration to cachePablo Neira Ayuso2015-08-181-2/+13
* src: add cmd_evaluate_list()Pablo Neira Ayuso2015-08-181-0/+23
* src: add cache infrastructure and use it for table objectsPablo Neira Ayuso2015-08-181-0/+6
* src: add netdev family supportPablo Neira Ayuso2015-06-161-0/+4
* eval: prohibit variable sized types in concat expressionsPatrick McHardy2015-06-021-0/+7
* nftables: add set statemetPatrick McHardy2015-04-121-1/+27
* set: add timeout support for setsPatrick McHardy2015-04-121-0/+4
* expr: add set_elem_expr as container for set element attributesPatrick McHardy2015-04-121-0/+15
* evaluate: missing break; in str2hooknum()Pablo Neira Ayuso2015-03-171-0/+2
* evaluate: use stmt_evaluate_arg() in all casesPatrick McHardy2015-01-121-4/+3
* evaluate: check that map expressions' datatype matches mappingsPatrick McHardy2015-01-121-0/+7
* evaluate: properly set datatype of map expressionPatrick McHardy2015-01-121-1/+1
* evaluate: verify named map is actually a mapPatrick McHardy2015-01-121-1/+2
* evaluate: clean up unused variables (pctx)Alvaro Neira Ayuso2015-01-121-3/+0
* concat: add concat subtype lookup/id helpersPatrick McHardy2015-01-111-6/+3
* evaluate: add missing datatype compat checks for statement argumentsPatrick McHardy2015-01-101-23/+43
* eval: refactor NAT evaluation functionsPatrick McHardy2015-01-101-56/+54
* erec: use stdio vasprintf instead of gmp_vasprintfSteven Barth2015-01-071-2/+6
* evaluate: reject: fix dependency generation from nft -fPablo Neira Ayuso2015-01-061-1/+2
* datatype: change concat_type_alloc() to construct type from idPatrick McHardy2014-12-161-5/+6
* datatype: add define for maximum number of bits and mask of datatype idPatrick McHardy2014-12-161-1/+1
* datatype: add new subtypes field to account number of concat data typesPatrick McHardy2014-12-161-2/+4
* src: generate set members using integer_type in the appropriate byteorderPablo Neira Ayuso2014-12-091-1/+3
* evaluate: reject: fix crash on NULL location with bridge and tcp resetAlvaro Neira2014-11-261-1/+1
* src: add redirect supportArturo Borrero2014-11-041-0/+40
* evaluate: reject: enhance the error support throwing message with more detailsAlvaro Neira2014-10-241-17/+26
* evaluate: reject: check the context in reject without reason for bridge and i...Alvaro Neira2014-10-241-2/+42
* evaluate: reject: check in bridge and inet the network context in rejectAlvaro Neira2014-10-241-51/+117
* evaluate: reject: accept a reject reason with incorrect network contextAlvaro Neira2014-10-241-0/+2
* evaluate: reject: fix crash if we have transport protocol conflict from inetAlvaro Neira2014-10-211-1/+6
* evaluate: reject: fix crash if we specify ether type or meta nfprotoAlvaro Neira2014-10-211-7/+7
* evaluate: fix a crash if we specify ether type or meta nfproto in rejectAlvaro Neira2014-10-111-1/+50